PT-2025-42430 · Unknown · Whale Browser

Published 2025-10-16 · Updated 2025-10-21 · CVE-2025-62584

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 4.33.325.17

Description A security issue exists in Whale browser that allows an attacker to bypass the Same-Origin Policy when a dual-tab environment is used. This bypass could potentially allow unauthorized access to data or functionality.

Recommendations Update Whale browser to version 4.33.325.17 or later.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-62584

Affected Products

Whale Browser

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-62584 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62584 · Vendor Advisory
• https://cve.naver.com/detail/cve-2025-62584.html · Vendor Advisory
• https://t.me/cveNotify/138914 · Telegram Post
• https://twitter.com/cracbot/status/1980589930397970882 · Twitter Post
• https://t.me/cveNotify/139581 · Telegram Post
• https://t.me/CVEtracker/35060 · Telegram Post
• https://twitter.com/CVEnew/status/1978926636922782184 · Twitter Post